Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
File: Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft (raw, json)
Hash identifier: tRwh5YDZXUfyMUK+NDCED6PzWszoJjhdVFrjZ4Q1QrE=
Subject key identifier: C7:4E:69:1E:60:DD:93:14:C0:31:6F:E2:56:DB:CC:87:96:EB:82:29
Authority key identifier: 0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
Certificate issuer: /CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Certificate serial: 019E3229EF3DD3D995A45193FAC8052EC8EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
Manifest number: 1916
Signing time: Sat 16 May 2026 19:01:09 +0000
Manifest this update: Sat 16 May 2026 19:01:09 +0000
Manifest next update: Sun 17 May 2026 19:01:09 +0000
Files and hashes: 1: DkVdvbXhpbo9CQqVcVFBg1LNoNE.roa (hash: qaF1R+er71d5hFs2KTiNhXAjh56KPYgioy+6tvssIEE=)
2: Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl (hash: GRlAAvIM6HltqEaOs7mDRVQYoF0s6fisfNNvUWqauLs=)
3: WIQ88PUyl0Wn69b9mzqB92sF45M.roa (hash: ATP8ajAQ0MqjrK6hyWC+m5lGC/lxKRtV3XstqqIRErs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:ef:3d:d3:d9:95:a4:51:93:fa:c8:05:2e:c8:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f091bdc666b8a59433c68d90e0d8cc37acdce92
Validity
Not Before: May 16 19:01:09 2026 GMT
Not After : May 17 19:01:09 2026 GMT
Subject: CN=c74e691e60dd9314c0316fe256dbcc8796eb8229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:09:2e:9e:25:c3:80:14:b7:35:1b:a3:e7:43:
85:b1:cf:00:75:fc:45:38:7a:ae:19:4c:06:f3:bb:
04:68:f7:ad:81:f8:28:48:e5:38:2b:7d:92:c1:83:
d4:be:eb:24:b4:3a:d8:e9:cc:d4:cf:9c:f5:5d:c2:
35:34:9f:c3:f9:44:d3:8c:f8:f9:de:88:55:30:0e:
c8:36:67:0b:fe:43:c1:e6:7b:7e:7d:1b:bd:2e:ca:
78:16:15:9f:c6:6a:76:3e:49:6e:a8:13:5e:2f:c1:
27:8c:15:05:d9:87:66:fd:63:7a:a9:24:db:a4:84:
c4:d3:f9:80:4f:7d:e2:87:e2:4e:07:b8:1e:be:a2:
02:1c:45:4e:30:29:38:94:de:23:e8:33:98:d6:43:
f9:f5:c2:8b:bc:25:b8:a3:b1:70:2b:78:d8:62:89:
de:13:b8:21:8b:03:bd:e0:80:cd:1d:a1:e0:0f:e2:
7f:a3:a9:47:72:cc:41:34:e5:1e:1f:29:8c:a0:75:
45:9b:43:ca:b8:e9:dd:7a:f3:10:12:6f:41:f2:b6:
73:30:9e:26:ad:51:9c:de:64:d9:62:75:78:42:b8:
0f:7c:12:0f:99:d0:c9:cd:0d:ec:32:b0:90:69:00:
48:e3:30:66:87:ec:36:d6:fd:8b:04:ef:59:b1:f8:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:4E:69:1E:60:DD:93:14:C0:31:6F:E2:56:DB:CC:87:96:EB:82:29
X509v3 Authority Key Identifier:
keyid:0F:09:1B:DC:66:6B:8A:59:43:3C:68:D9:0E:0D:8C:C3:7A:CD:CE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwkb3GZrillDPGjZDg2Mw3rNzpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b64083-550e-4caf-bc29-a34a8b806832/1/Dwkb3GZrillDPGjZDg2Mw3rNzpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:87:ce:bb:10:63:04:96:34:86:04:dd:48:75:10:db:27:4e:
98:0a:4c:d0:8c:3b:18:fe:5d:e5:0d:38:dc:9c:e3:b6:6f:54:
0b:c0:98:8b:04:08:07:79:cc:35:b8:10:22:50:10:6b:6b:95:
cd:4f:c0:0f:60:68:c6:6f:de:0c:63:ab:f1:a3:bd:c7:d3:23:
77:c8:02:9d:88:ad:e9:5b:23:43:8a:93:31:3e:21:41:6e:5e:
1b:63:71:62:7d:f1:92:57:35:f0:97:8e:cc:87:e9:24:5b:e3:
73:62:d2:a8:a6:38:ae:3e:98:1f:ad:80:32:2c:6b:2e:8c:41:
29:6b:56:fe:f4:5d:0a:1c:06:b6:35:7b:80:60:24:f5:3c:27:
01:94:76:da:f4:28:e2:3a:ec:ed:26:f2:40:38:48:2b:b1:f0:
97:cd:df:89:de:1c:ef:45:fa:fc:28:bb:14:9e:05:33:5b:3b:
9d:cc:df:2c:2d:f0:4e:f4:be:6f:59:a2:5a:36:00:70:22:6e:
83:79:37:37:99:49:a9:dc:43:98:88:80:8a:86:51:45:8e:f0:
dd:59:20:f1:07:88:d4:d6:c3:dd:7e:31:61:b9:3a:c4:d2:f4:
fd:7f:55:e9:98:e3:a3:a6:24:38:0f:ef:8d:8b:54:03:11:de:
bb:05:3d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:13:42 2026 by rpki-client